web
This command configures various Web interface settings.
Syntax
(config-system)# web (web)#
| Command | Description | 
|---|---|
| blocking-duration-factor | Defines the number to multiple the previous blocking time for blocking the IP address (management station) or user upon the next failed login scenario. | 
| check-password-history {off|on} | Enables the device to enforce password history policy (reuse an old password), which prohibits a user from changing its password to any of the user's four previous passwords. | 
| check-weak-psw {off|on} | Enables the weak password detection feature, which detects if a user in the Local Users table is configured with a weak password (listed in the Weak Passwords List table). | 
| csrf-protection {off|on} | Enables cross-site request forgery (CSRF) protection of the device's embedded Web server. | 
| deny-auth-timer | Defines the duration (in seconds) for which login to the Web interface is denied from a specific IP address (management station) for all users, when the number of failed login attempts has exceeded the maximum. | 
| deny-access-counting-valid-time | Defines the maximum time interval (in seconds) between failed login attempts to be included in the count of failed login attempts for denying access to the user | 
| deny-access-on-fail-count | Defines the maximum number of failed login attempts, after which the requesting IP address (management station) for all users is blocked. | 
| display-last-login-info {off|on} | Enables the display of the user's login information upon each successful login attempt. | 
| enforce-password-complexity {off|on} | Enforces password complexity for users login and SNMP Community Strings. | 
| enforce-web-host-name {off|on} | Enforces access to the device's Web interface through a hostname only, and blocks any attempt to access the Web interface through the device's IP address. | 
| http-auth-mode {basic|digest-http-only| digest-when-possible} | Selects HTTP basic (clear text) or digest (MD5) authentication for the Web interface. | 
| http-port | Defines the device's LAN HTTP port for Web interface access. | 
| https-port | Defines the device's LAN HTTPS port for secure Web interface access. | 
| invalid-login-report | Defines how much information is provided in the logged error message when a user attempts to log in to the device with the wrong username or password (i.e., authentication failure). | 
| local-users-table-can-be-empty {off|on} | Enables (allows) the deletion of all users in the Local Users table. | 
| min-web-password-len | Defines the minimum length (number of characters) of the management user's login password when password complexity is enabled (using the [EnforcePasswordComplexity] parameter). | 
| req-client-cert {off|on} | Enables requirement of client certificates for HTTPS Web interface connections. | 
| secured-connection {http-and-https|https-only|https-redirect} | Defines the protocol (HTTP or HTTPS) for accessing the Web interface. | 
| session-timeout | Defines the duration (in minutes) of inactivity of a logged-in user in the Web interface, after which the user is automatically logged off the Web session. | 
| user-inactivity-timeout | Defines the duration (in days) for which a user has not logged in to the Web interface, after which the status of the user becomes inactive and can no longer access the Web interface. | 
| web-hostname | Defines a hostname (FQDN) for accessing the device's Web interface. | 
| web-if | Defines Web Interfaces (see web-if). | 
| web-logo-enable {0|1} | Enables the Web interface to display user-defined text instead of an image (logo). | 
| web-logo-text | Defines the text that is displayed instead of the logo in the Web interface. | 
| web-password-change-interval | Defines the minimum duration (in minutes) between login password changes. | 
Command Mode
Privileged User
Note
For more information on the commands, refer to the User's Manual.
Example
This example enables requirement of client certificates for HTTPS Web interface connections:
(config-system)# web (web)# req-client-cert on